Route Origin Authorization
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e203231383539.roa
File: 38352e3233372e3232332e302f32342d3234203d3e203231383539.roa (raw, json)
Hash identifier: hPlaqwLumct3I87VtS/1q2eq/0bWwt0QGfCGQMeC/wA=
Subject key identifier: 2C:B5:52:91:E9:91:30:6A:81:47:03:4F:02:61:0A:85:19:D5:F7:42
Certificate issuer: /CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Certificate serial: 74EB82B615539EFF7D1D3A13219C2E60D2215B41
Authority key identifier: DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e203231383539.roa
Signing time: Thu 31 Jul 2025 05:41:12 +0000
ROA not before: Thu 31 Jul 2025 05:36:12 +0000
ROA not after: Thu 30 Jul 2026 05:41:12 +0000
asID: 21859
IP address blocks: 85.237.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.mft
rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 14:36:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:eb:82:b6:15:53:9e:ff:7d:1d:3a:13:21:9c:2e:60:d2:21:5b:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc943cc2a7cdc378a37702573bb4f821170b530d
Validity
Not Before: Jul 31 05:36:12 2025 GMT
Not After : Jul 30 05:41:12 2026 GMT
Subject: CN=2CB55291E991306A8147034F02610A8519D5F742
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:eb:92:12:5e:ff:6a:52:9f:ae:98:61:df:8d:
4c:64:da:b2:ee:ac:33:d4:4b:0b:74:f9:0e:f8:16:
2a:78:df:3f:ac:a6:29:57:64:17:e3:3d:76:3a:70:
6e:16:f8:19:49:63:e9:ac:47:cc:5b:d7:b3:28:f2:
49:a7:be:04:5b:73:ae:d5:47:42:e4:c3:86:98:75:
77:f0:52:97:13:41:93:66:3a:f4:f3:3f:92:44:62:
70:76:20:8b:3f:fa:17:18:12:5c:f8:8d:ca:96:d3:
2a:76:fb:37:61:41:b1:b3:29:69:ac:0b:3a:24:21:
a4:7b:65:32:de:f6:43:06:37:d6:10:1c:b4:02:88:
be:72:96:f1:e0:51:0e:5d:10:b1:97:a6:3b:e7:87:
e4:27:41:a4:c2:2d:7a:99:d2:20:55:2f:d1:dd:44:
04:18:2d:8f:49:55:df:bd:60:e7:cb:ee:6c:ff:67:
20:63:21:31:55:d8:2f:34:01:24:c3:c5:92:c4:e3:
5f:98:39:48:e5:d1:dc:a8:4a:ea:51:47:66:d6:98:
2e:8a:e8:51:c3:27:99:5a:cf:63:8e:62:69:9f:67:
59:3b:5f:0a:d4:99:25:ee:c5:69:0b:c9:34:b6:bd:
36:66:6c:dd:e5:02:f4:b8:d3:f2:e9:6a:e7:df:16:
65:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:B5:52:91:E9:91:30:6A:81:47:03:4F:02:61:0A:85:19:D5:F7:42
X509v3 Authority Key Identifier:
keyid:DC:94:3C:C2:A7:CD:C3:78:A3:77:02:57:3B:B4:F8:21:17:0B:53:0D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/DC943CC2A7CDC378A37702573BB4F821170B530D.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3JQ8wqfNw3ijdwJXO7T4IRcLUw0.cer
Subject Information Access:
Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/6ab0722f-64d8-4ca9-9267-4e5154434101/0/38352e3233372e3232332e302f32342d3234203d3e203231383539.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.237.223.0/24
Signature Algorithm: sha256WithRSAEncryption
21:5d:26:af:94:91:fa:39:fd:1a:c7:69:aa:21:52:94:5a:b2:
68:3a:0a:d6:2c:1d:b4:30:3e:0a:ab:2f:03:5a:7b:ee:6b:75:
75:06:58:a2:97:80:ee:bc:23:05:57:52:c5:79:ef:bc:20:6d:
ec:eb:d2:35:65:53:fe:a6:51:55:0f:bd:61:b1:a6:37:69:f6:
16:f9:7f:09:18:63:45:3b:5c:85:bb:24:26:03:1d:9c:d5:49:
36:f9:50:2d:c5:0b:9e:24:d8:19:f0:b2:ef:f8:f3:22:ad:c6:
45:31:53:37:6f:10:41:b0:67:34:e2:e6:ae:ba:a9:c9:d1:9b:
68:c9:ee:74:1e:33:eb:26:de:35:05:83:f3:5b:c8:92:bf:8a:
47:04:81:6e:30:6f:40:21:d1:b6:b4:13:24:3d:d1:62:5a:9f:
d8:d0:7f:ac:a4:a1:68:43:e2:f6:89:0b:cd:f8:7a:c3:35:df:
bd:77:cd:6f:c3:57:4c:5b:bc:cb:e8:0a:25:25:cf:30:29:68:
19:ee:e9:79:ac:c7:8d:17:c7:9a:65:4f:74:30:89:f9:3f:53:
48:b3:45:0f:1f:f2:12:4b:ec:fc:9e:e5:5d:5f:fa:ae:79:af:
95:2f:97:de:5b:8b:13:3c:aa:bf:d9:46:96:27:e2:6a:1b:34:
0c:17:7d:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 7 05:08:06 2025 by rpki-client